Senior Network Security Engineer — Cisco ISE Specialist

Agile Defense; Suitland, Northern (MD, KY); Hybrid; USD 100,000 - 115,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Paid Time Off

Holiday Pay

Disability Insurance

Retirement Plan

Learning & Development

Job summary

Agile Defense is seeking a Senior Network Security Engineer in Suitland, MD to lead the Cisco ISE deployment and migration from ForeScout. The role focuses on authentication, policy design, and secure access controls across wired and wireless networks.

The successful candidate will have eight years in a large government environment, including leadership, with deep knowledge of 802.1X, RADIUS/TACACS+, and PKI integrations. On-site work required.

Qualifications

• Eight years in a large government org; five in technical leadership; four years with Cisco ISE.
• Four years supporting identity-centric/Zero Trust architectures with posture controls.
• Experience migrating from legacy NAC/RADIUS to Cisco ISE with Zero Trust.

Responsibilities

• Troubleshoot Cisco ISE across RADIUS, TACACS+, 802.1X, and endpoint authentication.
• Deploy, configure, and maintain Cisco ISE on two-node SNS 3715 HA cluster.
• Support migration from ForeScout CounterACT to Cisco ISE; map legacy policies to ISE.
• Provide wireless support and coordination with wireless teams.
• Integrate ISE with AD/LDAP for identity lookup and policy decisions.
• Enable ISE components: policy sets, profiles, 802.1X, PKI, and device admin.

Skills

Cisco ISE

NAC/NAM

RADIUS/TACACS+

802.1X

Active Directory

LDAP

Education

Bachelor’s degree in IT or cybersecurity

Tools

Cisco SNS 3715

Cisco 9800 WLCs

Job description

Agile Defense is seeking a Senior Network Security Engineer in Suitland, MD to lead the Cisco ISE deployment and migration from ForeScout. The role focuses on authentication, policy design, and secure access controls across wired and wireless networks.

The successful candidate will have eight years in a large government environment, including leadership, with deep knowledge of 802.1X, RADIUS/TACACS+, and PKI integrations. On-site work required.